I want to use SingalR in C# and .Net-Framework with Authorization and send sensitive data like username and password to the Host with the Connection Header to initiate the correct specific Role for the user.
Now my Question is, how safe is the Connection Header?
Are the Objects which are send to the Host encrypted like in SSH or can anyone read the sended headers like a string?